Re: zfskeys does not exist

From: Tomoaki AOKI <junchoon_at_dec.sakura.ne.jp>
Date: Sat, 13 Nov 2021 15:10:00 UTC
On Sat, 13 Nov 2021 13:00:59 +0100
Gary Jennejohn <gljennjohn@gmail.com> wrote:

> On Sat, 13 Nov 2021 11:33:01 +0000
> Graham Perrin <grahamperrin@gmail.com> wrote:
> 
> > <https://cgit.freebsd.org/src/commit/?id=33ff39796ffe469a764e485ac49c31700a51fd6f> (2021-07-28):
> > 
> >  > Add zfskeys rc.d script for auto-loading encryption keys  
> > 
> > <https://cgit.freebsd.org/src/log/?qt=grep&q=zfskeys> finds only the July commit.
> > 
> > Below, I don't have zfskeys. Please, can anyone explain?
> > 
> > Thanks
> > 
> 
> /usr/src/libexec/rc/rc.d/zfskeys
> 
> Maybe it isn't being installed automatically?  No idea and I don't
> use ZFS myself.

(CC'ing Allan Jude, the committer of this change.)

Not sure if it's intentional or not, /usr/src/libexec/rc/rc.d/Makefile
has no corresponding update.
Currently, it has .if block below.

=== quote ===

.if ${MK_ZFS} != "no"
CONFGROUPS+=	ZFS
ZFS+=		zfs
ZFS+=		zfsbe
ZFS+=		zfsd
ZFS+=		zpool
ZFS+=		zvol
ZFSPACKAGE=	rc
.endif

=== end quote ===

If these are intentionally kept unchanged, there can be some risk to
install zfskeys in some situations.

If not,

ZFS+=		zfskeys

line should be added somewhere inside the block.


> 
> > ----
> > 
> > root@mowa219-gjp4-8570p-freebsd:~ # service zfskeys status
> > zfskeys does not exist in /etc/rc.d or the local startup
> > directories (/usr/local/etc/rc.d), or is not executable
> > root@mowa219-gjp4-8570p-freebsd:~ # ls -hl /etc/rc.d/zfs*
> > -r-xr-xr-x $B".(B1 root $B".(Bwheel $B".".(B872B Jan $B".(B1 $B".(B2021 /etc/rc.d/zfs
> > -r-xr-xr-x $B".(B1 root $B".(Bwheel $B".".(B1.7K Jan $B".(B1 $B".(B2021 /etc/rc.d/zfsbe
> > -r-xr-xr-x $B".(B1 root $B".(Bwheel $B".".(B209B Jan $B".(B1 $B".(B2021 /etc/rc.d/zfsd
> > root@mowa219-gjp4-8570p-freebsd:~ # ls /usr/local/etc/rc.d
> > amd $B".".".".".".".".".".".".".".".".".".".".(Bgpsd $B".".".".".".".".".".".".".".".".".".".(Bsndiod
> > aria2 $B".".".".".".".".".".".".".".".".".".(Bgrafana $B".".".".".".".".".".".".".".".".(Bsnmpd
> > atop $B".".".".".".".".".".".".".".".".".".".(Biocage $B".".".".".".".".".".".".".".".".".(Bsnmptrapd
> > avahi-daemon $B".".".".".".".".".".".(Bjackd $B".".".".".".".".".".".".".".".".".".(Bstunnel
> > avahi-dnsconfd $B".".".".".".".".".(Bmicrocode_update $B".".".".".".".(Bsvnserve
> > bsdstats $B".".".".".".".".".".".".".".".(Bminiupnpc $B".".".".".".".".".".".".".".(Btcsd
> > clamav-clamd $B".".".".".".".".".".".(Bmysql-server $B".".".".".".".".".".".(Btor
> > clamav-freshclam $B".".".".".".".(Bnetdata $B".".".".".".".".".".".".".".".".(Btpmd
> > clamav-milter $B".".".".".".".".".".(Bphp-fpm $B".".".".".".".".".".".".".".".".(Bubuntu
> > cpupdate $B".".".".".".".".".".".".".".".(Bpoudriered $B".".".".".".".".".".".".".(Buuidd
> > croc $B".".".".".".".".".".".".".".".".".".".(Bpowerdxx $B".".".".".".".".".".".".".".".(Bvboxheadless
> > cups_browsed $B".".".".".".".".".".".(Brdnssd $B".".".".".".".".".".".".".".".".".(Bvboxnet
> > cupsd $B".".".".".".".".".".".".".".".".".".(Brsyncd $B".".".".".".".".".".".".".".".".".(Bvboxwatchdog
> > dbus $B".".".".".".".".".".".".".".".".".".".(Bsamba_server $B".".".".".".".".".".".(Bvboxwebsrv
> > dsbmd $B".".".".".".".".".".".".".".".".".".(Bsaned $B".".".".".".".".".".".".".".".".".".(Bvirtual_oss
> > gdm $B".".".".".".".".".".".".".".".".".".".".(Bsddm $B".".".".".".".".".".".".".".".".".".".(Bvm
> > git_daemon $B".".".".".".".".".".".".".(Bslpd $B".".".".".".".".".".".".".".".".".".".(Bwebcamd
> > gkrellmd $B".".".".".".".".".".".".".".".(Bsmartd
> > root@mowa219-gjp4-8570p-freebsd:~ # date
> > Sat Nov 13 10:21:22 GMT 2021
> > root@mowa219-gjp4-8570p-freebsd:~ # uname -aKU
> > FreeBSD mowa219-gjp4-8570p-freebsd 14.0-CURRENT FreeBSD 14.0-CURRENT #114 main-n
> > 250511-5f73b3338ee: Sat Nov $B".(B6 21:15:23 GMT 2021  $B".".".".(Broot@mowa219-gjp4-8570p-fre
> > ebsd:/usr/obj/usr/src/amd64.amd64/sys/GENERIC-NODEBUG $B".(Bamd64 1400040 1400040
> > root@mowa219-gjp4-8570p-freebsd:~ #
> 
> 
> -- 
> Gary Jennejohn
> 


-- 
Tomoaki AOKI    <junchoon@dec.sakura.ne.jp>